Smart card issuing and receiving apparatus

ABSTRACT

An apparatus for issuing a transaction card comprises a value receiving mechanism in the form of a card reader or a bank note acceptor or both. The apparatus includes a memory for storing the exchange rate for a plurality of currencies as compared to a local visitor&#39;s voucher which can be issued by the apparatus. A mechanism is also provided for storing a maximum transaction limit corresponding to a selected number of visitor&#39;s vouchers, which in turn corresponds to value of currency received. The transaction card is advantageously a smart card or chip card, which carries a program mechanism and central processing unit for manipulating the values which can be stored in the card.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of application Ser. No. 094,379,filed Sept. 8, 1987 and granted as U.S. Pat. No. 4,837,422 on June 6,1989.

FIELD AND BACKGROUND OF THE INVENTION

The present invention relates, in general, to electronic transaction andidentification systems, and, in particular, to portable electronictransaction devices, such as cards, keys, etc. and appertainingstationary equipment, such as terminals and coding and transactiondevices.

For the sake of simplicity, the portable devices will be referred to as"cards" "M-cards" or "modules". M-cards, for the purpose of thisapplication, are plastic devices, comprising integrated circuits,commonly called "smart cards" or "chip cards". Such smart cards or chipcards contain electronic components in microstructure, i.e. integratedcircuits. Devices of this nature have been disclosed in German patent DE19 45 777 C3 to DETHLOFF, filed on Sept. 10, 1969.

The integrated (semiconductor) circuits contained in such cards aregenerally of two types: logic structures and memories.

Before the advent of these cards, all machine-operable or machinereadable cards carried only passive memory means. Information could bewritten on or read from a magnetic stripe, for instance. A piece ofinformation could also be erased from the stripe and another, e.g.updated, piece of information, could be written onto it again. Thecapacity of magnetic media on cards is limited to a few hundred bits ofinformation.

The advantage of a card containing chips is twofold: the logicalstructures make the card active, i.e. information can be processedwithin the card and could be computed or compared with other informationand the like. The other advantage is provided by the semiconductormemories, which have a multifold capacity compared with magnetic mediaon cards, and which can be programmed in various ways (to make theircontents inaccessible after write-in, to make it unalterable etc). Itcan be foreseen, that within a reasonable period of time, chip cardswill be more generally introduced and will replace the presently widelyused magnetic stripe cards. Presently, common cards, magnetic stripe,and others, are "single-user cards", i.e. such cards are assigned toonly one cardholder.

Current magnetic stripe cards, which are machine-operable, carry as onepiece of information on their magnetic stripe, a personal designation ofthe rightful cardholder. A so-called PIN (Personal IdentificationNumber) is widely used as such a personal designation. It is encryptedand, when the card is used, it will be decrypted in the reading device.To ensure the identity of the user and the rightful owner, the PIN isread from the mag stripe and then decrypted. The PIN is then compared inthe reader, with the PIN inputted into the reader by the user.

The algorithm to decrypt the coded PIN obtained from the card isavailable in all readers. It is obvious that technically trainedcriminals could obtain the algorithm or the decrypting module or a wholereader, to illegally decrypt PINs from stolen cards or to learn how toencrypt false PINs onto the memory of forfeited cards.

To overcome this drawback, U.S. Pat. No. 4,105,156, to DETHLOFF,discloses memory means that are inaccessibly and integrally incorporatedin a card for entry and storage of information therein, and further, thecontents of the memory being available only within the card.

This patent further discloses components included in the card andactivated in response to inputs from a reader, to effect checking of theidentity and entitlement of a user of the card. Thus, the comparing ofthe PIN stored in the card and the PIN inputted at the time of using thecard is no longer executed in the reader. No algorithm can be derived orstolen from the reader, nor does it make sense to obtain a reader forderiving PINs from stolen cards or illegally encrypting PINs for fakedcards.

But still the PIN is to be inputted into the card for checking via thereader by keying the PIN onto the PIN keypad of the reader. It ispossible to illicitly tap the line from the PIN keypad in the reader tothe terminals of the card. This would permit a criminal to learnindividual PINs from specific cards.

To eliminate this kind of a risk, U.S. Pat. No. 3,641,316, to DETHLOFFet al, discloses means incorporated in a card to input the PIN directlyinto the card. This, in addition, eliminates the possibility of a thirdperson unauthorizedly spying out the PIN, when same is keyed in onto thekeypad of the reader by the rightful cardholder.

Upon checking (comparing the PINs), the checking means within the cardproduces a signal, which indicates whether the inputted PIN correspondsto the stored PIN or not.

It will be understood that cards can be faked to produce positivesignals. It is therefore essential that a precedent card authenticationcheck is made. Only an authentic, i.e., genuine card can produce a trueidentity check signal.

Such checks for authentication will very probably be based on so-calledpublic key or "trapdoor" algorithms, as disclosed in U.S. Pat. No.4,405,829 to RIVEST et al. This kind of verification requires a secretkey to be "sealed" within the card, i.e., the key is to be charged intoa memory within the card in a way that it cannot be read out from thecard and cannot be altered after having been charged and that it is onlyavailable within the card for processing when executing anauthentication check.

A key in the form of a card with a magnetic stripe that can beprogrammed by the issuer when issued for a selected period of time tounlock doors, for example, in a hotel, is known from U.S. Pat. No.4,385,231 to MIZUTANI et al. U.S. Pat. No. 4,523,297 to UGON et aldiscloses a portable hand held machine which includes a keyboard,display, microprocessor and memory, and which receives a carrier in theform of a plastic card, which also carries a microprocessor and memoryfor the purpose of carrying on a dialogue between the machine and thecarrier. Also, see U.S. Pat. No. 4,305,059 to BENTON which discloses asystem for transferring funds utilizing portable modules carryingkeyboards and displays; U.S. Pat. No. 4,614,861 to PAVLOV et al whichdiscloses a unitary self contained card having keyboard and display;U.S. Pat. No. 3,996,450 to KERKHOFF disclosing a cash dispenser with aPIN changing function; and U.S. Pat. No. 4,460,965 to TREHN disclosingthe loading of a sub transaction memory from a main credit memory inportable devices.

DETHLOFF U.S. Pat. No. 4,105,156 claims memories that are chargeableonly once and the contents of same being only available within the card.

As will be seen thereafter, the integrated circuits within a card, whichinclude memories whose contents are only available within the card,components included in a card, which are responsive to an input fromoutside the card, and means incorporated in a card to input informationdirectly into a card, represent the state of the art.

It is further within the state of the art that cards are issued andassigned to one and one only user or cardholder. It is common practicefor card issuing organizations to strictly instruct card users not togive away or permit other persons to use the card. The organizationshold the cardholder liable for any seemingly authorized use of the cardby third persons.

For example: the instructions of a known card issuing organization,which will be called XY, read as follows:

"keep your XY card in a safe place and permit no other person to useit....do not tell any other person your secret Personal IdentificationNumber (PIN) or write your number on your XY card or otherwise make itavailable to anyone".

The XY cardholder Agreement states:

"We will mail you a secret PIN and you agree to keep the number secret,even from bank employees".

The limitation by the principle "one card--one user" represents anuncomfortable inconvenience. If one thinks, for example, of a card usedby travelers abroad. The cardholder is accompanied by his or her family;the cardholder is required, in each and every case, to execute cardtransactions personally, i.e. he/she could not send somebody else of thefamily for shopping with his/her card.

Aside from traveling, there are numerous examples when cardholders arehindered by having to appear personally to use their cards. They oftenwould like to charge somebody else to do the transaction or to obtainthe service in question for him/her. However, cardholders are notpermitted to hand over their cards and name their PIN to third parties.In most cases, they would not want to do this either. So card issuingorganizations and cardholders find themselves on the same side. If thirdpersons were permitted to use the cards and, therefore, to learn the PINof the original cardholder, they could dispose of the whole value whichis assigned to the card.

In an attempt to overcome this inconvenience, card issuing organizationssometimes offer additional cards for cardholders' families ("partnercards") or members of cardholders' business, often at lower cost.

The card issuing organization may thus assign one card to more than oneperson and personalize such card with more than one PIN, each one for adifferent person. This, however, would require an advance determinationof the use data (money, services, time frames or other authorization)for each authorized person. Such procedure would only meet therequirements of a small percentage of conceivable applications orcardholders. It would also require quite some amount of red tape to beexchanged between the card issuing organization and such applicantcardholders to prepare and agree upon the individual card (use) data forthe personalization of those cards in a legally satisfying way and tocover the relevant liabilities.

All in all such preprogrammed cards for plural users would be aninflexible instrument as day-to-day requirements of users cannot beforeseen.

The multi-user card (M-card) of the present invention should not bemistaken for a multi-purpose or multi-service card, i.e., a card whichis commissioned or backed by different "issuers", that is to say bydifferent businesses, for example, by one or more banks, a railwaycompany, a gasoline company and by a car parking business. Cards of thisnature have been disclosed, for example, in U.S. Pat. No. 4,443,027, byMcNEELY et al as a Multiple Company Credit Card System. Also, see U.S.Pat. No. 4,656,342, to UGON. Such cards are still assigned to only onecardholder.

U.S. Pat. No. 4,277,837 to STUCKERT discloses a portable terminal forreceiving two cards for conducting transactions between the cards. PCTapplication no. W083/03018 discloses the use in cards of a plurality ofidentifying characteristics which can be randomally selected.

The limitation of one card to one cardholder is not the only drawback ofpresent card systems. Another one is represented by the inflexibility ofthe values of stored units of money or other credits.

Cards contain in their memories, information which permits thecardholder to obtain certain values, i.e., a piece of merchandise, aservice such as car parking, or a fare from location A to location B.Such credit information is usually expressed by "units". Those units mayrepresent different values, even in the same card In a multi-purpose ormulti-company card system, one card may contain different kinds of unitsfor different kinds of businesses, such as a bank, a railway company, agasoline company or a parking lot. For example, the "units" in bankingare designated as money units (1 unit--1 U.S. $ or 1 yuean), the "units"of a railway company can be designated as a number of rides between twopredetermined locations for commuting The "units" of a gasoline companyare--again designated as money units, and a unit of the car parking canbe equivalent to one day's parking.

All cards to date have in common that such units do not change theirindividual value from the time of card issuance or re-issuance until themoment when the last unit is "consumated". In other words one unit"initiated" as one U.S. Dollar or as a one way fare from location A tolocation B, retain, for the time of their "life", the value of one U.S.Dollar and of such one way fare.

Presently known cards, thus, (a) are single-user cards (unless theywould originally be personalized by the issuer for more than one user,which, however, has practically not yet been done) and (b) contain"units" whose value is unalterable once loaded.

Summarizing, it can be stated that the relevant assignments, such as (a)the assignment of a card to a user (cardholder), (b) the assignment of adesignation to the credit units, and (c) the assignment of a value toone unit, are (A) controlled by the issuer(s) and (B) accomplished priorto issuance or reissuance of the card.

SUMMARY OF THE INVENTION

It is one object of the present invention, therefore, to provide asystem wherein a card issued to a single cardholder or user, comprisemeans controllable by the cardholder at any time after issuance orreissuance, to assign rights to third parties, to change and cancel suchrights and to assign additional designations and values to data storedin the card. The cardholder and the sub-user can also changedesignations and values of data originally assigned to such data by theissuer(s), all within the scope of the original rights, terms andconditions of the issuer(s). Expressed more generally, the inventivesystem with cards or other modules, includes means for permanent afterissuance or after reissuance variability of data stored in memorieswithin the card, by assigning codes, values and designations to saiddata stored in said memories within the card

In more detail, these means are controllable by the cardholder to assignrights to a third person (sub-user) at any time, at any place and to anyselectable extent of use of the card, within the scope or rights, termsand conditions the card has originally been initialized or reissued forby the issuer or the issuers, to the cardholder. The card is assignableby the cardholder to a predeterminable number of sub-users. The extentof rights, terms and conditions for sub-use by an individual sub-user,can refer (a) to its application or issuer, such as for bankinginvolving monetary application, or railway riding involving a service;(b) to the term within which the assignment shall be valid; and (c) tothe value, e.g. in money units, service units, number of uses or anyother kind of digitally determinable credit or authorization, and toother properties of the card.

These means further allow the cardholder or the issuer, after issuanceor re-issuance of the card, to assign different values to one unit,change the designations of units and assign additional designation to aunit, all within the scope of the original extent of terms, and creditvalues initialized or reissued by the issuer(s).

The capabilities of the card, namely to be assignable to sub-users andto be alterable as to the values and designations of the stored units,can be provided in individual (single) or in combinational (multi-usercard+variable value card) embodiments.

It is another object of the present invention to provide a card with oneor both of the aforesaid properties which is compatible with existingsystems. The input and output procedures of the multi-user card can bemade to match the standards for cards that are within the state of theart.

The cardholder's operation to assign certain rights of use to sub-usersis selfcontained. That is, it does not require any assistance from thesystem. The system can be designed, however, to provide assistance tothe cardholder to do the programming any time after issuance orreissuance, at the cardholder's option, and in accordance with his orher then prevailing requirements.

It is still another object of the invention to provide key means forentering data into the card, display means for checking the availableconditions and balances of consumable values, units and time and forspecifying and checking the assignment or alteration data, and aresident power source. The card further includes memory means and logiccontrol means to process data when (a) the card is assigned to asub-user, (b) values are altered or newly designated and (c) the card isused by a sub-user with the original unit values and designations or bythe cardholder or a sub-user with altered unit values and designations.

It is still another object of the invention to provide such a cardwithout keyboard, display and power source, but in combination with asupplementary device ("envelope") that can be connected to the card, thesupplementary device comprising the keyboard, display, logic and memorymeans, and a power source. The exterior of the card is thenindistinguishable from conventional cards.

The supplementary device can be portable or stationary. The contactbetween card and supplementary device can be galvanic or otherwise, suchas optical, inductive, capacitive or by microwave. The supplementarydevice includes the means to assign the card to sub-users and to assignand alter values and designations. The supplementary device can be madein at least two embodiments, one for assigning the card to sub-users,and another one to assign and alter values and designations, or it canbe embodied as a combination device for both tasks. This card ishereafter referred to as an "M-card", while the supplementary device isreferred to as an "M-card envelope" or simply an "envelope".

It has been found that a substantial need in the business and bankingcommunity would be satisfied by the provision of a cardholdercontrollable multi-user card, such as that of the present invention.This card would serve to greatly enhance the comfort and convenience ofcardholders, card issuing organizations and card receiving businesses.Cardholders would be relieved of performing each and every transactionthemselves and would be allowed to designate third persons as sub-usersto do one or more particular transaction or to obtain certain serviceswithin the limitations of fixed terms and conditions set by thecardholder without disclosing his/her PIN and without opening therebythe card's full credit to such sub-users. For assignment to a sub-user anew PIN has to be entered for that sub-user. The M-card of the presentinvention can thus also serve to enhance security against loss andtheft. In cases when a cardholder is afraid that during the course of atransaction the PIN could be explored or spied out by a third person, hecould make the M-card useless for a thief or a dishonest finder. Thecardholder simply preprograms the M-card to make himself a sub-user,i.e., to assign (besides his main PIN) a new PIN and limits theavailable value under the new PIN to the approximate or exact amount ofthe expected transaction and also sets a time window (term) within whichsuch transaction shall be possible. He can do this shortly before atransaction is executed. Should he lose the card thereafter, thepreprogrammed credit has either been consummated or the time limit hasexpired.

Another advantage is the alterability of values and designations. Thismakes the M-card flexible in a way which cannot be foreseen as to allpossible aspects. The following examples may serve to understand a fewof the new applications.

While it is conceivable that cards within the state of the art could beinitialized by the issuer for different currencies, this is not verycomfortable though, as most people cannot foresee what their needs willbe in a year's time or so. It would enhance convenience and comfort, ifwithout re-initializing (reissuing) the card, either a bank or thecardholder, or even a sub-user, could "change" any time, currencieswithin the M-card to the extent which is set by either the originallyinitialized terms and conditions and values or by the relevant sub-userdata. In another application, where a business ("company") is thecardholder, the M-card can become a so-called company card. They may bein the form of credit cards. Such company cards can be given by thecompany to employees who travel at the company's expense. The companycan assign the M-card to an employee to make him/her a sub-user of theM-card and set the estimated amount of credit in one or more currencieswith a time limit. When using the M-card the employee enters the kind ofexpenditure into the card and then the M-card automatically keepsrecords of the transactions. When traveling abroad, he/she could evenchange valuta from one currency to another when he/she needs money inanother country. The procedure of changing valuta with floating rates ofexchange will be described later. Upon return of the employee, he/shesurrenders the M-card to the issuing company office. The issuing companyoffice then inserts the M-card into a reader, where the transactions areread out from the transaction memory, the transactions representing theexpense account of the traveling employee and are fed into the computeraccounting system, where it is further processed. Thereafter, thetransaction account in the memory of the M-card is reset to zero, thesub-user PIN (M-PIN) memory is cleared and the M-card can be programmedto be issued to another traveling employee.

It can easily be seen that the advantages of an application like thisare manifold: the company saves liquidity. Since it need not furnish thetraveling employee with cash money, (or its equivalent in travelerschecks), and it saves card fees, since it need not obtain individualcards for all or most of its traveling employees. Further, the employeeis relieved of having to sit down and write expense accounts. Thebookkeeping of travel accounts is automated. The procedure even prevents"padding" or falsification of travel expense accounts or other expenseaccounts, since the transaction memory of the M-card reflects the truevalue of each transaction, unless a vendor cooperates fraudulently withthe employee.

Another application becomes evident when an M-card is used by atraveling family. In such case, the cardholder can assign the M-card indifferent ways, e.g. to certain members of the family for the whole timeof the trip and to others, only from one expected transaction to anotheror for a day or a number of days. The cardholder can program fullauthority for instance, for his or her spouse and limited amounts forthe children. In addition, the M-card can serve as a foreign valutameans of payment, as described before.

For changing valuta from one currency to another, which means alteringthe value of units and altering the designation of units, i.e., to"change" a certain amount of currency A to currency B, where there is afloating rate of exchange, a device or a machine serves to calculate andto authorize such "exchange" to make the M-card operable fortransactions in the "new" currency. Such devices or machines will beinstalled by internationally operating card issuing organizations atlocations where travelers mainly convene, e.g. airports, railwaystations, hotels, etc. The machines operate on-line with a hostcomputer, which updates the prevailing rates of exchange of floatingcurrencies, permanently or from time to time.

In still another application where a country provides visitors fromabroad with special goods and services to be obtained at special places,e.g., hotels, M-cards provide advantages over a system which eitherfurnishes the visitor with special visitor vouchers (ViVo) in exchangefor his/her foreign valuta, or which country requires payment at thosespecial places by foreign valuta. Neither alternative may suffice whenit is illegal for domestic people to possess either visitor vouchers orforeign currency, especially when visitors pay for goods and serviceswith ViVos or foreign currency at such places which also accept domesticcurrency.

Now, in a system of the present invention which permits or requires theforeign visitor to exchange his/her foreign valuta against a "Visitor'sVoucher Card", M-cards can be issued at the consulates of the country orat the place of entry into the country from M-card issuing machines intowhich the visitor's name, the PIN selected by him/her and the amount ofmoney he/she wants to exchange is entered. Such machines can alsocomprise a banknote receiving module for valuta of a known type or acard acceptor for visitors' home credit or debit cards. The machine mayeven store the visa and health certificate of the visitor or visitors intheir M-cards. When traveling inside the country, the visitor can assignthe card to his/her co-traveling family members in accordance with theirrequirements.

The great versatility of M-cards can be demonstrated by still anotherexample within the aforesaid application of the M-card as a visitor'svoucher card. The visitor may wish to obtain goods or services which areprovided at certain places for domestic people and foreign visitorsalike, such as clothes in department stores or airline or railwaytickets. Since the visitor, when entering the country and exchanginghis/her money, cannot predetermine or foresee what will be the ratio ofspecial goods and services reserved for foreign visitors to be paid byViVos or the like, on the one hand, and other goods and services beingobtainable by domestic customers and foreign visitors as well as to bepaid by domestic money on the other hand, he/she--at the moment oftransaction--enters into the M-card, the amount of money in domesticcurrency he/she is due to pay, which then is "exchanged" within theM-card into domestic currency. Thus, the domestic vendor receivesdomestic currency from domestic and foreign customers likewise In caseslike this, there is no need for a device or machine to calculate andvalidate card currency exchanged, as the government authorities use toset a fixed rate of exchange between visitor's vouchers (ViVo) anddomestic currency, i.e., at least during the term of the M-card there isno floating rate, of exchange.

Further, at places such as hotels, airports and railway stations, wherevisitors accumulate, domestic currency cash dispensers can be placedwhich accept M-cards with an already pre-changed credit in domesticcurrency to provide the visitor with domestic bank notes.

While specific embodiments of the invention have been shown anddescribed in detail to illustrate the application of the principals ofthe invention, it will be understood that the invention may be embodiedotherwise without departing from such principals.

BRIEF DESCRIPTION OF THE DRAWINGS

In the accompanying drawings, forming a part of this specification, andin which reference numerals shown in the drawings designate like orcorresponding parts throughout the same:

FIG. 1 is a plan view of the M-card, used with the system of theinvention, in its self-contained form;

FIG. 2 is a block diagram of the components of the M-card shown in FIG.1;

FIG. 3 is a plan view of an M-card for use in combination with anenvelope;

FIG. 4 is a perspective view of an envelope usable in combination withthe M-card of the inventive system;

FIG. 4a is a perspective view of another embodiment of the envelope withM-card;

FIG. 5 is a view of the envelope with the M-card in a non-contactposition;

FIG. 6 is a view of the envelope with the M-card partly extracted andaligned in contacting position with envelope contacts;

FIG. 7 is a view of the envelope with a cut-out to see contactpositioning for the sub-user M-PIN and variable value operation;

FIG. 8 is a block diagram of the M-card and the envelope, connected toeach other;

FIG. 9 is a flowchart of the multi-user programming for sub-users;

FIG. 10 is a flowchart of the cancellation process for a sub-userauthorization;

FIG. 11 is a flowchart of the variable value programming demonstratedwith the example "FOREIGN EXCHANGE", including information on creditstatus;

FIG. 12 is a flowchart of variable value programming shown in FIG. 11without information on status;

FIG. 13 is a flowchart of the terminal validating process related toFIGS. 11 and 12;

FIG. 14 is a flowchart of the re-change process;

FIG. 15 is a perspective view of the visitor voucher card issuingmachine, showing the operator control pane-;

FIG. 16 is a view of the machine of FIG.-5, showing the visitor controlpanel;

FIG. 17 is a block diagram of the visitor voucher card issuing machine;

FIG. 18 is a flowchart of the visitor voucher card issuing process; theprocess related to FIG. 17;

FIG. 19 is a perspective view of a visitor voucher card return machine;

FIG. 20 is a block diagram of a visitor voucher card return machine; and

FIG. 21 is a flowchart of the visitor voucher card return process,related to FIGS. 19 and 20.

DESCRIPTION OF THE PREFERRED EMBODIMENT

The objects of the present invention are accomplished in general, by adevice which may be portable or not, and operative in conjunction withother devices. In case the device is portable, it is hereafter referredto as our "M-card". In another embodiment, which may be portable orstationary as well, it is referred to as "incentive module" or "IncMod".While the M-card is compatible with cards in external systems whichconform with generally accepted standards, the other embodiment of themodule, forms, in combination with appertaining devices, a system of itsown. Such other devices would normally be in the form of a terminal oran off-line stand alone unit, which will be referred to as a "businessstation" or "BST".

The M-card includes keyboard means for entering commands andidentification data, and numerical values comprising, but not limitedto, transaction data. The devices further include memory means forpermanently and temporarily storing data, and logic means for performinglogic processes and arithmetic calculations on data stored in the memorymeans and data entered via the keyboard means. Display means areprovided for selectively displaying data including, but not limited tothe commands and transactions to the card and to the module in itsportable embodiment. The devices include also a power source, such as abattery.

The M-card may comprise all means as described above. In an alternativeembodiment, the above means are distributed between the card and an"envelope", hereafter referred to as "M-card envelope".

In such an embodiment, the M-card comprises logic and memory means,while M-card envelope may include other logic and memory means, displaymeans, keyboard means and an internal power source.

The M-card envelope in its portable form, in general, has the form of acard, whereby its outer dimensions are a small percentage greater, sothat it can receive the M-card through an opening at its shorter side.

This embodiment of a combination consisting of M-card and M-cardenvelope has the advantage that the M-card looks like conventional cardsand does not include display or keyboard means and the power source.

Since the function of the M-card, when it also comprises the display andthe keyboard means and power source, is analogue, i.e., almost equal tothe function of a combination consisting of an M-card and an M-cardenvelope, only the latter one will be described in more detail.

The present M-card envelope would normally, although not necessarily, beowned by the holder of an M-card. However, the M-card and the M-cardenvelope are not logically connected with each other. So, an M-cardholder could use any other "foreign" M-card envelope to program his/herM-card.

The M-card, when used for transactions in an external system, isutilized as any standard smart card or chip card, i.e., the utilizationof the M-card for transactions does not require the presence of theM-card envelope.

For programming the M-card, the M-card is placed inside the M-cardenvelope. The M-card envelope may serve as a container for the M-card,when it is carried around by its holder. When the M-card envelope servesas a container, the M-card is totally inserted into the M-card envelope.

To prepare the combination of M-card and M-card envelope for programmingthe M-card, the M-card and the M-card envelope must be configured in away that a cooperative data exchange relationship is established. Thiscan be done via galvanic contacts or otherwise, such as inductance,light, microwave, etc. In the present description, galvanic contacts areassumed.

Referring now to FIG an M-card 101 is shown in its selfcontained form.The keypad 102 includes the numerical keys "1" through "0" and "C" 110,which serves to cancel the last entry, and further "reset" 109, "ok"108, "info" 105, "service" -04 and the special keys in accordance withthe present invention; "M" 106 and "VV" 107. The M-card 101 furtherincludes the alphanumerical display 103.

FIG. 2 is a block diagram, where the terminals 219 and 220 establishcontact with an external device. The terminals 219 are connected to aninput/output device 218, which establishes a serial data exchange withan external device. The terminals 220 connect to a power supply from anexternal source. A standard card logic 208 serves mainly to authenticatethe card, the PIN (checking the identity of the user and the rightfulholder of the card) and for external transactions. An interim ortemporary memory 209 accepts external data for the time of the checkingprocedure, when such external data, the PIN and other identifying data,are fed into this memory to be internally checked as to whether they arecorrect or not. A program memory 217 comprises an into-program 216, amulti-service program 215, an external transaction program 214, anarithmetic calculation program 213 and PIN check program 211. Acardholder's PIN memory 210 is not accessible from outside and itscontent is only available within the card. Interim memory 212 storesdata for further internal processing. A multi-user (M) and variablevalue (VV) logic 201 is logically adjacent to sub-user PIN programmemory 206, variable value program memory 205, internal transactionprogram memory 204 and display or text program in memory 230. A sub-userPIN memory 207 is not accessible from outside and its content is alsoonly available within the card. Sub-user PINs can be stored and erasedunder the control of M and VV logic 201. A working memory 224 comprisestransaction accounts for the cardholder and sub-users 225, the terms ofuse for the cardholder and for sub-users 226, the VV transaction accountfor cardholder and sub-users 227 and the table of different services thecard is commissioned for 228. The above working memory 224 is part ofthe standard function package of the card. A working memory 221comprises a conversion (variation) factors table 222 and a designationmenu 223. Memories 223 and 222 can be arranged as a combinationalregister, where at least one designation is assigned, or correlated withone variation factor.

It is noted that while the PIN is given as an example of cardholder andsub-user enabling code, any other code can be used, such as a voiceprint (to be stored as data and input by the cardholder or sub-user) oran algorithm such as a "trapdoor" algorithm mentioned above.

Except for the terminals or connectors 219 and 220, the foregoing partsmay all be integrated into one monolithic circuit. The keyboard 102comprises its numerical keypad 111, the function keys "service" 104,"info" 105, "reset" 109, "ok" 108 and the following keys, which are partof the present invention; the sub-user programming key "M" 106 and thevariable value key "VV" 107. The display 103 provides informationconcerning the user, and guides the cardholder when using the ("M")function "sub-user programming", as well as to guide the cardholder anda sub-user when using the function "variable value". A power source 229provides internal electric power for the logic circuits when inoperation, and for programming and erasing EEPROM type of memories forsub-user PIN programming and variable value storage. Its function willbe explained in more detail later in connection with, FIG. 8, whosefunction and operation are identical.

Referring to FIG. 3, an M-card 301 is shown which does not include akey-pad or a display. It indicates, however, a galvanic contacts block302 with individual contacts 303. It further indicates bars 304, whichdiffer in colour from the ground and serve for the proper alignment ofthe card, when brought in contact with the M-card envelope.

FIG. 4a shows another embodiment of the invention where the envelope 501has a slot 502 through which a programmable card 510 can be s-id forprogramming a magnetic stripe 512 of the card. The envelope 501 may havea display, input keys and a power supply similar to the envelope of FIG.4. In addition, envelope 501 includes a read/right head 504 for readinginformation from and writing information on the magnetic stripe 512, aswell as an erase head 506 for erasing the magnetic stripe 512. Inaccordance with the present invention, the magnetic stripe 512 carriesthe programmable memory of the card, whether the card is a multi-usercard, a variable value card, or a card issued with visitor's vouchers.The card 510 can be programmed by manually sliding the card through theslot 502.

FIGS. 4, 5, 6 and 7 show an M-card envelope having the keyboard 102, thedisplay 103, a window 403 to make the alignment bars 304 visible whenenvelope and M-card are in the contacting position, and a recess 402 togrip the card when totally inserted in the envelope. A cut-out area 701in FIG. 7 shows the position of terminal block 302 when alignment bars304 on the M-card 301 are visible in the opening 403. This indicatesthat the terminal block 302 is in its contacting position with thecounter contacts of the envelope. A snap or defective device can also beprovided to hold the M-card in its proper contacting position. FIG. 8 isa block diagram of the M-card 301 when in contact with the envelope 401Both are indicated by framing dotted lines. The parts of the card 301are identical with the parts shown in FIG. 2 with the only differencethat keyboard 102, display 103 and the power source 229 are now placedin the envelope 401. The envelope further comprises the connectors 802and 803, which establish contact with their counterparts 219 and 220 inthe card. In addition, the envelope includes key-coding means 801, whichserve for the serial input of key signals into the IO device 218.

Since the function of the combination envelope, plus card, is, inprinciple, identical to the function of the self contained card as shownin FIG. 2, the function will be described only once in the following.

FIGS. 2 and 8 are block diagrams of a combination card comprising themeans for both the sub-user and the variable value function. It will beappreciated that these two functions can also be incorporated singly inseparate cards. First, the sub-user function will be described. Beforestarting the operation, the cardholder inserts the card into theenvelope and brings it, by properly aligning the alignment bars 304 andin window 403, into its contacting position with the envelope. Then thecardholder presses the key "M" 106. The signal is coded in key-codingdevice 801 for serial transmission through the terminals 802 and 219into the M/VV logic 201, which is activated by this signal

Logic 201 then causes program memory 230 to release the properinstruction texts on display 103 to guide the cardholder during theoperation. The following texts on display 103 are each triggered by theforegoing operational step All this is shown in the flowchart of FIG. 9.

When activated by the signal from the "M" key 106, the logic 201 furthercauses the standard card logic 208 to check the PIN of the cardholder inits standard way. If the PIN is correct, logic 208 releases a signal tologic 201, which then requests, via the display, the cardholder to enterthe PIN of +h=sub-holder (M-PIN). To ensure that the entered PIN is theone the cardholder really wants, logic 201 activates once more, textprogram 230 to request the "ok" from the cardholder. The cardholder thenpresses the "ok" key 108, which signal coded in key coder 801 effectslogic 201 to store the sub-user PIN in sub-user PIN storage 207 and makethe PIN inaccessible from outside. Logic 201 triggers logic 208 to opena sub-user transaction account 225 in working memory 224.

The activation of a specific service, which is only relevant in amulti-company or multi-service card, can be used with the presentinvention. Details of this, however, are not included here as not beinga part of the present invention. Appropriate steps, as shown in FIG. 9,can provide for this capacity.

Sub-user program 206 then causes text program 230 through display 103 torequest from the cardholder, entry of the credit amount for sub-user'stransaction account Upon having effected logic 208 to check in theconventional way, whether cardholder's transaction account providesinsufficient funds to be transferred from cardholder's transactionaccount to sub-user's transaction account, the requested amount forsub-user's transaction account is then, by internal transaction program204, through logic 201, internally transferred from cardholder's accountto sub-user's transaction account 225 in working memory 224. In the casewhere the card is a debit card to be used for accessing the cardholder'sbank account, the card will not normally have a memory for storing acardholder transaction limit. The card, in accordance with the presentinvention, will, however, have a sub-user memory for storing a maximumsub-user transaction amount to which the sub-user is authorized toconduct transactions using the debit card.

In case the sub-user's authority over his/her transaction account is tobe limited by a certain term (time period), the entry of such term willthen be requested from cardholder by the sub-user program analogously asin the amount function Logic 201 will then cause logic 208 to enter suchterm into the "terms of use" memory 226 in working memory 224.Sub-user's term is then assigned to sub-user's transaction account. Forthe use of the M-card by a sub-user, for own transactions, the procedureis standard. The only difference is that logic 208 has--when checkingthe PIN--not only access to cardholder's PIN memory 210, but also tosub-user's PIN memory 207. PIN check program 211, in program memory 217,is adapted accordingly. It first checks whether the PIN inputted by theuser is available in the cardholder's PIN storage, and in case it isnot, it will then check with the sub-user PIN storage. If the inputtedPIN cannot be found in either storage, the logic will start the wrongPIN procedure. If the inputted PIN is found in the sub-user PIN storage,the standard transaction or other program will be started by logic 208.

FIG. 10 is a flowchart showing a process for the cancellation ofsub-user authorization which is under the control of the cardholder.Sub-user program 206 in FIGS. 2 and 8, however, also causes logic 201 toautomatically erase a sub-user PIN from sub-user PIN memory 207, whenthe sub-user's positive balance in the transaction account 225 becomeszero or the sub-user's term in memory expires, whichever occurs first.

The internal transaction program in memory 204 causes logic 201 tore-transfer through logic 208 any possible positive balance fromsub-user's transaction account to cardholder's transaction account, bothin transaction memory 225. It further effects the transfer of theindividual transactions of sub-user from sub-user's transaction accountto cardholder's transaction account, affixing sub-user's PIN to suchindividual transactions for later auditing. The sub-user PIN program inmemory 206 then causes logic 208 through logic 201 to cancel sub-user'sterm in memory 226.

The sub-user uses and operates the card the same way as the cardholderdoes. The whole procedure within the system is, however, now related andlimited to the preprogrammed credit and use data of the sub-user.

The procedure is in principle as follows:

the machine checks the card authenticity;

the card checks the sub-user's identity (upon sub-user's inputtinghis/her PIN);

the card accepting machine checks available funds (to sub-user) and theterm (sub-user's authorization terminating date); and;

if ok for funds and term, the card accepting device executes thetransaction and updates the sub-user's transaction memory within thecard.

This M-card sub-user PIN procedure is thus like a "card-within-a-card".

When the credit of the sub-user has been consumed, or the term hasexpired, the program within the card resets the sub-user transactionmemory to zero and (re-)transfers any unused balance, from the sub-usertransaction memory to the cardholder's transaction (credit) memory. Atthe same time, the individual transactions of sub-user are transferredto the cardholder's transaction memory. To keep them identifiable forlater auditing, the respective sub-user (M-)PIN is assigned, e.g., as aprefix to the amount(s) of the sub-user transaction(s).

Simultaneously, with the closing of the sub-user's transaction account(memory), the sub-user PIN will also be cancelled (automatic cardfunction).

Such terminating functions are executed either at the end of the lasttransaction, which consumates the whole credit or the rest of it; incase of expiration by time, when the card is used the next time with acard accepting device, which contains a calendar (real time clock), orreceives the date from a host computer.

Where the "envelope" comprises a calendar, the cancellation will beeffected when a card is inserted the next time after the expirationdate, into the envelope.

FIGS. 11 and 12 are flowcharts, which demonstrate variable valueprogramming ("VV" key). FIG. 11 shows the alternative, when thecardholder can inform him/herself via the info program in memory 216, onthe available amount of credit for such operation. FIG. 12 shows theflowchart without the "info" function.

The variable value related section of the text program in memory 230 canbe programmed in various ways. The function will be explained by theexample "foreign exchange". A cardholder or sub-user disposes in histransaction account in memory 225, a certain credit balance in a givenoriginal currency. At a certain time, he/she wants to dispose of foreignexchange. Since both the cardholder and the sub-user can make use ofthis function, they will be referred to as "user" in the following forthe purpose of describing this particular function.

To start the function, the user presses the "VV" key 107 The key signaleffects the variable value program in memory 205 to request the user toprove his/her authorization by entering his/her PIN. So far, theprocedure is the same as with the sub-user function as explained beforeOnce the entered PIN has been identified as correct, the variable valueprogram causes logic 201 to call up the foreign exchange designationmenu in memory 221. For this application, a selection of thedesignations of foreign currencies is preprogrammed in this memory. Theuser can now repeatedly press the "VV" key 107, which causes logic 201under the variable value program in memory 205 to display after eachkeystroke, the next designation of a foreign currency in a pre-arrangedorder.

When the desired currency appears on the display, the user presses the"ok" key, whose signal then causes the variable value program to ask theuser, via the display, for the amount. The user then enters the amountonto numeric key-pad 111. Hereafter, as explained above, under thefunction "sub-user programming", the program checks whether the enteredamount is available as a credit balance in the cardholder's orsub-user's transaction account memory 225. If sufficient funds areavailable, the internal transaction program in memory 204 transfers theselected amount from cardholder's or sub-user's transaction memory 225to interim memory 212. Then, the variable value program in memory 205effects the arithmetic calculation program in memory 213 to convert theamount of original currency by calculating, with the proper conversionfactor in memory 222, the amount of selected foreign currency

The resulting amount of foreign currency is then transferred to VV(variable value) transaction memory 227. The variable value program inmemory 205 effects through logic 201 the assigning of the designation ofthe foreign currency to this amount which is stored in VV memory 227.

The above function is related to the exchange of currencies which isbased on fixed rates of exchange Such fixed rates of exchange are in theforegoing referred to as conversion or variation factors.

When there is a floating rate of exchange between an original currencyand a foreign currency, the procedure is split in one group of M-cardfunctions, including selecting the designation of foreign currency to beexchanged and transferring the desired amount from M-card transactionmemory 225 to interim memory 212, and another of the external machinefunctions, comprising calculating the amount of foreign currency basedon the then prevailing (floating) rate of exchange, and causing thevariable value program in memory 205 within the M-card to store thecalculated amount of foreign currency in variable value transactionmemory 227, while cancelling the amount of original currency in interimmemory 212 at the same time. By machine program, the designation of theforeign currency and the rate of exchange used to calculate the amountof foreign currency, are assigned to the transferred amount of foreigncurrency now stored in variable value memory for the purpose of laterre-exchange of foreign currency that was not used up into the originalcurrency. That is, the designation is affixed to the amount stored inthe variable value memory permit any transactions involving the memoryto be conducted according to the designated currency. This further is afair way of re-exchange, as neither the issuing organization nor thecardholder suffers a financial disadvantage in case the rate has changedbetween the time of exchange and the time of re-exchange, which isfundamentally different from the present procedure, where a person (oran organization, such as a business company) has to accept the loss whenthe rate of exchange has floated in an unfavourable direction.

FIGS. 11, 12 and 13 show flowcharts which elucidate the procedure whenthe exchange is determined by a floating rate of exchange. FIG. 14 is aflowchart which illustrates the procedure of re-exchange.

FIGS. 15 and 16 are views of an issuing machine 1501 for the M-card inits application of visitor vouchers (ViVo) In this embodiment, theissuing machine is designed in a way that the teller (bank or governmentoperator) and the visitor are sitting in front of each other. FIG. 15shows the operator's and FIG. 16 the visitor's control panels

In FIG. 15, the machine comprises an operator's display 1502,alpha-numerical keyboard 1504, a "start" button 1506, an "ok" button1505, a PIN-pad 1507, a currency selector keyboard 1509, a customer slipprinter 1503, a visitor's home credit/debit card slot 1510 and a foreignbanknote acceptor 1511. The visitor's home credit/debit card insertionslot could also be placed on the visitor's side. 1508 is a reset key.

In FIG. 16, the machine further comprises a visitor's display 1602, aPIN-pad 1604, an "ok" button 1605 and an (M-)ViVo card stacker anddispenser 1606.

FIG. 17 is block diagram of the (ViVo) card issuing machine. Besides theelements that are visible from the outside, the machine comprises aprocessing unit 1701, program memory 1702, interim PIN memory 1703(which is disposable where there is no stored PIN record), a generalvisitor file 1704 and a machine journal and audit file 1705. 1708 is anexchange rate storage.

Operations by both the operator and the visitor and the machine functionare shown in the flowchart of FIG. 18.

FIG. 19 is a perspective view of a (M-)ViVo card return machine 1801,which accepts at the place of the visitor's departure, the return ViVocard. The machine comprises visitor's display 1802 and, arranged in thevisitor's control panel 1807, the "start" button 1806, the "ok" button1805, the card return slot 1808, the PIN-pad 1804, the visitor's slipprinter 1803 and the bank note dispenser 1809.

FIG. 20 is a block diagram of the machine of FIG. 19, including aprocessing unit 1901, a program memory 1902, an interim PIN memory 1903,the general visitor file 1904, and the machine's journal and audit file1905.

FIG. 21 shows a flowchart which explains the ViVo card return operationand card return machine function.

What is claimed is:
 1. An apparatus and transaction card combinationcomprising:a currency value memory for storing exchange rates of aplurality of currencies as compared to a number of visitor's vouchersthat are issuable by said apparatus; means for receiving and fordetecting the value of any one of said currencies; storing meansconnected to said currency value memory means for calculating a selectednumber of visitor's vouchers which corresponds to a value of thecurrency received, and for storing the selected number as a transactionvalue limit in a transaction card; code selection means for selecting aunique cardholder personal enabling code, said storing means operatingto store said selected cardholder personal enabling code in saidtransaction card; card dispensing means for dispensing said transactioncard after the transaction value limit and the cardholder personalenabling code have been stored therein; and said transaction carddispensable by said card dispensing means comprising a programmablecardholder memory means for storing the cardholder personal enablingcode; authenticity checking means for authenticating a personal enablingcode as corresponding to the stored cardholder personal enabling codefor permitting a cardholder to conduct activities with said transactioncard; and a programmable cardholder memory for storing the selectednumber of visitor's vouchers corresponding to the transacting valuelimit in said transaction card.
 2. An apparatus and transaction cardcombination comprising:a currency value memory for storing exchangerates of a plurality of currencies as compared to a number of visitor'svouchers that are issuable by said apparatus; means for receiving andfor detecting the value of any one of said currencies; storing meansconnected to said currency value memory means for calculating a selectednumber of visitor's vouchers which corresponds to a value of thecurrency received, and for storing the selected number as a transactionvalue limit in a transaction card; card dispensing means for dispensingthe card after the transaction value limit has been stored therein; atransaction card return device comprising transaction card receivingmeans for receiving and reading said transaction card; program meansconnected to said card receiving means for calculating an unused balanceof the transaction value limit stored in said transaction card; andvalue returning means connected to said program means for returning avalue of currency corresponding to the remaining transaction valuelimit.
 3. An apparatus according to claim 2 including authenticitychecking means connected to said program means for receiving acardholder personal enabling code and for comparing the personalenabling code to a stored personal enabling code in said transactioncard, for activating one of said program means and said value returningmeans.
 4. An apparatus and transaction card combination comprising:acurrency value memory for storing exchange rates of a plurality ofcurrencies as compared to a number of visitor's vouchers that areissuable by said apparatus; means for receiving and for detecting thevalue of any one of said currencies; storing means connected to saidcurrency value memory means for calculating a selected number ofvisitor's vouchers which corresponds to a value of the currencyreceived, and for storing the selected number as a transaction valuelimit in a transaction card; card dispensing means for dispensing thecard after the transaction value limit and a cardholder personalenabling code have been stored therein; and a transaction card whichcomprises cardholder memory means for storing a cardholder personalenabling code; programmable sub-user memory means for storing a sub-userpersonal enabling code; program means for programming said programmablesub-user memory means with at least one selected sub-user personalenabling code; and authenticity checking means for authenticating apersonal enabling code as corresponding to the stored cardholderpersonal enabling code and permitting access to said program means forprogramming said sub-user memory means, said authenticity checking meansalso authenticating a personal enabling code as corresponding to asub-user personal enabling code stored in said sub-user memory means. 5.An apparatus for issuing a transaction card comprising:a currency valuememory for storing exchange rates of a plurality of currencies ascompared to a number of visitor's vouchers that are issuable by saidapparatus; storing means connected to said currency value memory meansfor calculating a selected number of visitor's vouchers whichcorresponds to a value of currency received, and for storing theselected number as a transaction value limit in a transaction card; carddispensing means for dispensing the card after the transaction valuelimit has been stored therein; and value receiving and detecting meansconnected to said storing means for receiving a value of currency in anyone of the plurality of currencies, said value receiving and detectingmeans comprises a card reader for reading the value of currency from avisitor's card, and a note receiver for receiving and reading the valueof currency in currency notes.
 6. An apparatus according to claim 5including a keypad connecting to said value receiving means forinputting the value of currency to be received by said value receivingmeans, and a currency selection keypad connected to said currency valuememory for selecting the currency from among the plurality of currenciesin the currency value memory.
 7. An apparatus for an operator to issue atransaction card to a cardholder comprising:a currency value memory forstoring exchange rates of a plurality of currencies as compared to anumber of visitor's vouchers that are issuable by said apparatus; meansfor receiving from a customer and for detecting the value of any one ofsaid currencies; storing means connected to said currency value memorymeans for calculating a selected number of visitor's vouchers whichcorresponds to a value of the currency received from the cardholder, andfor storing the selected number as a transaction value limit in atransaction card; code selection means positioned to be accessible bythe cardholder for selecting a unique cardholder personal enabling code,said selection means not being accessible to the operator, said storingmeans operating to store said selected cardholder personal enabling codein said transaction card; and card dispensing means for dispensing thecard to the cardholder after the transaction value limit and code havebeen stored therein.
 8. An apparatus according to claim 7 wherein saidcode selection means comprises a keypad which is positioned to beaccessible by the cardholder and to be inaccessible by the operator whenoperating the apparatus.
 9. An apparatus according to claim 8 includinga second keypad and display which is positioned to be accessible by theoperator when operating the apparatus, and to be inaccessible by thecardholder.